Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Versions

1.0
14

Microsoft azl3 prometheus-process-exporter 0.8.2-3Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna

Risk 68
Severity
10
First published (updated )
CVE-2026-39821

go/golang.org/x/crypto/sshInvoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

Risk 88
Severity
10
First published (updated )
CVE-2026-46595

golang/golang.org/x/crypto/sshInvoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

Risk 71
Severity
9.1
First published (updated )
CVE-2026-39830

go/golang.org/x/crypto/ssh/knownhostsInvoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

Risk 71
Severity
9.1
First published (updated )
CVE-2026-42508

golang.org/x/crypto/sshInvoking infinite loop on large channel writes in golang.org/x/crypto/ssh

Risk 71
Severity
9.1
First published (updated )
CVE-2026-39834
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

go/golang.org/x/crypto/sshInvoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

Risk 71
Severity
9.1
First published (updated )
CVE-2026-39831

golang/golang.org/x/crypto/ssh/agentInvoking key constraints not enforced in golang.org/x/crypto/ssh/agent

Risk 71
Severity
9.1
First published (updated )
CVE-2026-39833

go/golang.org/x/crypto/ssh/agentInvoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

Risk 71
Severity
9.1
First published (updated )
CVE-2026-39832

npm/axiosAxios: Prototype pollution read-side gadgets in HTTP adapter allow credential injection and request hijacking

Risk 66
Severity
9.1
First published (updated )
CVE-2026-42264

npm/axiosAxios: Incomplete Fix for CVE-2025-62718 — NO_PROXY Protection Bypassed via RFC 1122 Loopback Subnet (127.0.0.0/8) in Axios 1.15.0

Risk 73
Severity
10
First published (updated )
CVE-2026-42043
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

npm/axiosAxios: Invisible JSON Response Tampering via Prototype Pollution Gadget in `parseReviver`

Risk 66
Severity
9.1
First published (updated )
CVE-2026-42044

npm/axiosAxios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain

Risk 93
Severity
10
First published (updated )
CVE-2026-40175

npm/lodashlodash vulnerable to Code Injection via `_.template` imports key names

Risk 61
Severity
9.8
EPSS
0.09%
First published (updated )
CVE-2026-4800

Kennethreitz Certifi PythonCertifi's removal of e-Tugra root certificate

Risk 89
Severity
9.8
First published (updated )
CVE-2023-37920

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203